Customize a Windows Embedded 8.1 Industry image before deployment

9/16/2013

Microsoft

September 2013

Summary

Helps you to customize your Windows Embedded 8.1 Industry (Industry 8.1) image with lockdown features before you deploy it to your devices.

Applies To

Windows Embedded 8.1 Industry Pro

Windows Embedded 8.1 Industry Enterprise

Introduction

When you first install Industry 8.1, lockdown features are not included in the image. You can use Windows System Image Manager (Windows SIM) to configure an answer file to add lockdown features to your image during installation or deployment.

Windows SIM is a tool that is included with the Windows Assessment and Deployment Kit (Windows ADK). To download the Windows Assessment and Deployment Kit (Windows ADK), see Windows Deployment with the Windows ADK on MSDN.

Add lockdown features to your image by using Windows SIM

In Windows SIM, you open an Industry 8.1.wim file, create a catalog, and then create a new answer file. Adding a feature to your image does not necessarily enable the feature. You may also have to configure settings to enable it.

To add lockdown features

  1. Start Windows System Image Manager.

  2. On the File menu, click Select Windows Image.

  3. In the Select a Windows Image window, locate the Install.wim on your Industry 8.1 media.

  4. Select Install.wim, and then click Open.

  5. If this is the first time that you are opening an Industry 8.1.wim file, Windows SIM will ask you if you want to create a catalog file. Select Yes to enable Windows SIM to create the catalog.

  6. In the Windows Image pane, expand Packages > Foundation.

  7. Right-click the Microsoft-Windows-Foundation-Package for your architecture, and then select Add to Answer File.

  8. In the Microsoft-Windows-Foundation-Package pane, under Windows Feature Selections, expand ISKU-Embedded-Features.

  9. To configure the device so that lockdown settings can be applied, select ISKU-Embedded-Features, click the drop-down icon, and then select Enabled.

  10. Under ISKU-Embedded-Features, select the lockdown features that you want to add to your image, click the drop-down icon, and then select Enabled.

  11. To configure lockdown feature settings, in the Windows Image pane, expand Components, and then right-click the corresponding component to add it to the pass.

    For example, to configure Keyboard Filter settings, right-click Microsoft-Windows-Embedded-KeyboardFilterService, and then select Add Setting to Pass 2 offlineServicing.

  12. In the Answer File pane, expand Components, and then expand the pass that contains the settings component for the lockdown feature.

  13. Select the component. The properties pane will contain a list of modifiable settings for the component.

  14. Change the settings as desired. If you do not change any setting values, then the component settings will not be added to the answer file.

  15. To further modify your image, see Windows SIM How-to Topics on MSDN.

Conclusion

To add lockdown features to your image during installation or deployment, use Windows SIM to configure an answer file to add the features and settings.

Alternatively, you can add lockdown features to your image after installation in Control Panel > Programs and Features > Turn Windows features on or off > Embedded Features.